Privacy policy – Fintech Forum 2023

Conditions for the processing of personal data

1. These conditions for the processing of personal data (hereinafter – the Rules) establish the procedure by which the controllers ensure the processing, security and protection of the data of the participants and visitors of Latvia’s FinTech forum 2023, which takes place on 10 October 2023 at Gustava Zemgala gatve 74, Riga, at the premises of Fantadroms, (hereinafter – the Forum). The controllers has engaged Data Processors to ensure the running of the event.

2. Controllers:
2.1. Latvijas Banka, registration No 90000158236, legal address: K. Valdemāra iela 2A, Riga, LV-1050, Latvia (hereinafter – the Bank). The processing of personal data by the Bank, which is not regulated by the Rules, is governed by the Bank’s Privacy Policy (available here: https://www.bank.lv/en/about-us/useful/processing-of-personal-data);

2.2. Investment and Development Agency of Latvia, registration No 90001739473, legal address: Pērses iela 2, Riga, LV-1422 (hereinafter – LIAA). LIAA’s personal data processing, which is not regulated in the Regulations, is regulated by LIAA’s Privacy Policy (available here: https://www.liaa.gov.lv/lv/privatuma-politika)

I. Purpose and legal framework for personal data processing

3. The purpose and legal framework for personal data processing is:
3.1. to ensure the registration and participation of Forum participants in the Forum (processed personal data: first name, surname, e-mail address, position, name of the represented legal entity and represented country). The legal framework for processing personal data is Article 6(1)(e) of the General Data Protection Regulation – the public interest, controller – the Bank;
3.2. to ensure the exchange of organisational and operational information with Forum participants (processed personal data: first name, surname and e-mail address), including for obtaining feedback on the Forum (evaluation). The legal framework for processing personal data is Article 6(1)(e) of the General Data Protection Regulation – the public interest, controller – the Bank;
3.3. to ensure the publicity and promotion of the Forum, the raising of public awareness, photography and video recording during the Forum, as well as the publication of photo and video materials on the Internet and social networks (processed personal data: first name, surname, image, voice recording and name of the represented legal person). The legal framework for processing personal data is Article 6(1)(e) of the General Data Protection Regulation – the public interest; controller – the Bank;
3.4. to provide information to other Forum participants by presenting a QR code, thus enabling the Forum participants to contact each other and facilitating the exchange of contact information (i.e. for networking purposes), if the Forum participant has chosen to use this option (personal data processed: first name, surname, position, e-mail address, telephone number, name of the represented legal person and LinkedIn profile link). The legal framework for processing personal data is Article 6(1)(a) of the General Data Protection Regulation – consent, controller – the Bank;
3.5. to provide information to other Forum participants via mobile apps, thus enabling Forum participants to communicate with other Forum participants and to book meeting times in a specially designated area at the Forum venue, if the Forum participant has chosen to use this option and installs the app on their device (processed data: e-mail to obtain the right to install the application; information provided by the participant in their user profile in accordance with the app’s terms and conditions). The legal framework for processing personal data is Article 6(1)(a) of the General Data Protection Regulation – consent, controller – LIAA;
3.6. to receive newsletters from the Bank (processed personal data: e-mail address). The legal framework for processing personal data is Article 6(1)(a ) of the General Data Protection Regulation – consent, controller – the Bank;
3.7. to provide Forum participant’s personal data (name, surname and name of institution) from LIAA to Central finance and contracting agency of Republic of Latvia after separate request regarding functions related to monitoring the implementation of European Union funding projects. The legal framework for processing personal data is Article 6(1)(e) of the General Data Protection Regulation – the public interest, controller – LIAA;

II. Personal data for registration at the Forum

4. The participant registers for the Forum at https://fintechforum2023.eu/, where the participant enters his or her personal data, confirming that he or she has read the Rules.
5. When registering for the Forum, the participant provides the following personal data: first name, surname, e-mail address, position, name of the represented legal person and represented country.
6. Upon arrival at the Forum, the participant will be identified by their first name and surname and will be issued with an admission card.
7. The Bank reserves the right to restrict or deny access to the Forum to any person.

III. Time limits for collection, storage and deletion of personal data

8. The collection and further processing of personal data within https://fintechforum2023.eu/ is carried out from the time of registration of the Forum participant until 10 November 2023.
9. Personal data are stored and processed only to the extent and for the period necessary for the fulfilment of the purposes set out in these Rules:
9.1. personal data specified in Paragraph 3.1 of these Rules – until 31 December 2033;
9.2. personal data specified in Paragraphs 3.2, 3.4 and 3.5 of these Rules – for 30 days after the Forum has taken place;
9.3. photo and video materials pursuant to Paragraph 3.3 of these Rules – permanently (for the purpose of ensuring the archive of the events);
9.4. first name, surname, e-mail address of the Forum participant – the controllers stores these data for 12 months or for a shorter period after the Forum has taken place, if the Forum participant has withdrawn his or her consent, in order to provide the Forum participant with information about other events organised by the Bank or LIAA.
9.5. personal data specified in Paragraph 3.7 of these Rules LIAA stores for 10 years.

IV. Consent of the Forum participant to the processing of personal data

10. By submitting personal data, the Forum participant confirms that he or she has read the Rules. Participation in the Forum cannot be ensured without processing the Forum participant’s personal data.
11. If the Forum participant withdraws his or her consent to the processing of personal data, all personal data submitted by the Forum participant will be deleted, except in those cases where it is not possible to delete the personal data if this would involve a disproportionate effort (for example, in the case of already printed materials, published photographs or audiovisual materials).
12. The controllers are entitled to use the material resulting from photography or video recording, in whole or in part, for any form of information on the Forum. The Forum participant is informed that the controllers will exercise these rights freely at its own discretion and that the controllers are also entitled to transfer these rights to third parties.

V. Rights of the Forum participant

13. The rights of the Forum participant are:
13.1. to request at any time from the controllers information about the Forum participant as set out in Article 13 of the General Data Protection Regulation;
13.2. to access the relevant data and to obtain the information set out in Article 15 of the General Data Protection Regulation by contacting the controllers;
13.3. to request from the controllers the rectification, erasure or restriction of processing of the Forum participant’s personal data, or the right to object to such processing in accordance with Articles 17 and 21 of the General Data Protection Regulation;
13.4. to withdraw a previously given consent to the processing of personal data;
13.5. if the personal data information provided by the Forum participant changes, the Forum participant is entitled to request the rectification (correction) of his or her personal data by contacting the controller.

VI. Additional information

14. The bank involves Data Processors:
• SIA Audiovisual (registration No 40103779266), which will process the personal data when filming and interviewing the Forum participants;
• SIA LETA (registration No 40003229349), which will process the images of the Forum participants (i.e. take photographs at the venue of the event).
• SIA DIVI Grupa (registration No 40003803059), which will maintain the Forum’s website.
• SIA “ABC idea” (registration No 40103285126), which will process the personal data (name, surname and name of institution) for the printing registration cards of the Forum participants.
15. The controllers takes appropriate technical and organisational measures to ensure the secure processing of personal data, applies appropriate security policies and procedures to protect data from unauthorised access, unauthorised processing or disclosure, alteration or destruction.

VII. Communication and procedure for exercising rights of the Forum participant

16. The Forum participant may exercise his or her rights, including the right to object or to ask questions to the controllers, by writing:
16.1. to the Bank at K. Valdemāra iela 2A, Riga, LV-1050 or by e-mail to: datuaizsardziba@bank.lv;
16.2. to the LIAA at Pērses iela 2, Rīga, LV-1442 or by e-mail to: datu.aizsardziba@liaa.gov.lv.
17. If the personal data information provided by the Forum participant changes, the Forum participant is entitled to request the rectification (correction) of his or her personal data by contacting the controllers.
18. The Forum participant has the right to lodge a complaint with the Data State Inspectorate, Elijas iela 17, Riga, LV-1050, e-mail: pasts@dvi.gov.lv.

Updated: 07.09.2023